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PREFACE 



This report culnunat^s yet another project initiated 
b> the Ajnerican Bar Association's Section of Indi- 
vidual Rights and Responsibilities (IR&R), this time 
executed with the support and cooperation of the 
American Federat>an of Information Processing 
Societies (AFIPS). IFt&R has undertaken a variety of 
programs during the last several years related to 
threats to bdividual privacy posed by the awesome 
proUferation of personal information. AFIPS has for 
many >ears been. concerned with privacy aspects of 
information processing as well, and the ABA. AFIPS 
partnership in this particular project is most gratify- 
ing. 

The increasing concern about personal privacy dur 
ing the last decade has stimulated much discussion 
and inquir) [because ethics, science, and the law all 
must be involved in policy formulation to develop a 
concept of informational privacy in the computer era, 
a dialogue between those disciplines could help to 
explore the subject of "privacy*' and perhaps lay 
some foundation for a better understanding of the 
concefct. Thus, ABA and AFIPS organized an inter- 
disciplmar) dialogue which was conducted on 
October 4-7, 1981 at Amelia Island Plantation in 
Florida 

This project began with an idea developed by 
Daniel L. Skoler, tl^en director of ABA's Division of 
Public Service Activities (of which IR&R is a part), 
Professor George B. Trubow, of the John Marshall 
Law School, van advisor to IR&R and the IR&R 
Privac> Committee, then Under the chairmanship 0/ 
Judge Charles W. Joiner. After exploratory inquiries 
receivedrintere3t from the National Science Founda- 
tion's Jrrogtam in Ethics and Values in Science and 
Tech*iology and the National EJVidewment for the 
Humanities, a grant proposa) was developed. AFIPS, 
through Dr Lance J. Hofftnan, professor of computer 
science at George Washington 'University and chair- 
man of the AFIPS Privacy Committee, responded to 
the ABA's invitation to join in the effort. Dr. Elmer 
R. Oettinger, Jr., Profess9r Emerittis of Public Law 
and Government and former Assistant Director of the 
Institute of Government at the University of North 
Carolina at Chapel Hill, became chairman of the 
IR&R Privacy Committee while the grant was in 
process and carried the project forward. Together 
ABA and AFIPS personnel finished the planning and 
execution of the program. Professors "Hoffman ai\d 
Trubow co-directed the project, and Judge Joiner was 
chairman of the planning dommittee and privacy 
symposium. 



At the opening of the symposium, back^ound 
papers on law, ethics, and technDlog> were presented 
by Professor iTrubow, Professor Alfred R. Louch, 
Chairman of the Philosophy Department, Claremont 
Graduate School, and Dr. Fred W. Weing^teYi of 
Infoh^iation Policy, Inc. These papers served to 
establish some crosswalks between the disciplines 
.with respect to informational privacy. Dn Willis H. 
Ware of the Rand Corporation then presented a p^per 
that' suggested a framework for examining informa- 
tional privacy. The complete papers are not made part 
of this report, but are available separately through 
the aba's Section of Individual Rights and Respon- 
sibilities as excellent resource documents in "Inv ited 
Papers on Privacy. Law, Ethics, ,and Technology." 
The purpose of this report is to focus on the results of 
the conference dialogue. ^~ 

Professor Trubow served as conference reporter 
and prepared the draft report which was reviewed by 
a committee composed of Judge Joiner, Professors 
Hoffman and Louch and Dr. Weingarten.^ A revised 
report was circulated to all conferees for their com- 
ment, and the review Committee gathered these com^ 
ments to shape the final report. 

The ABA's Sectidh of IR&R and the- AFIPS 
Privacy Committ^ are pleased to have cooperated in 
stimulating the examination of this very important 
subject. As society oecomes more crowded and com- 
plex and information is more freely exchanged and 
disseminated, it seems certain that irvlividual privacy 
wiU be subject to Increased pressure and perhaps 
diminution. We b^eve that an increasingly open 
sdciety desires an improved and advanced quality of 
life, yet needs to rnaintain an appropriate respect for 
individual privacy ias a cherished human value. It is to 
that end that this/project was sponsored, and we are 
most grateful to the National Science Foundation and 
the National Endowment for th^ Humanities for sup- 
port of this worthy effort. 



Dr. Elmer R.- Oettinger, Jr. ^ 
Chairmai;), IR&R^Privacy Committee / 

Dr. Lance J. Hoffman ^ 
Chairman, AFIPS Privacy Committee 
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INTRODUCTION 

Almost everyone seems to be talking about privacy 
today* but the word is used in a variety of ways. Wire- 
tapping* the right to an abortion* and the confidential- 
ity of financial information have all been refenjed to in 
a privacy" context. Thu^* privacy might refer to the 
exclusiveness of "space" around an individual* the * 
autonomy Of decisipn making without government 
interference, or the expectation that certain personal 
in^rmation will not be shown to outsiders. It is in the 
letter sense that the ABA/AFIPS symposium con- , 
;sidered the question of privacy. To a large extent an 
individulal is known to others as a composite of the* 
information that describes him. Especially in th^^ 
modem "information s6ciety'* where computers make 
information easy to store, manipulslte* use* and 
distnbute, mdividuals are increa^in^ worried about 
who has information concerning them, how it was 
obtained* and to what uses it will be put. 

There la no accepted intellectual foundation for the 
notion of mformational privacy. It is this reality that 
led the ABA* with AFIPS endorsement** to apply to 
the National Science Foundation for a grant to con- 
duct an interdisciplinary symposium to explore infor , 
mational privacy. Because the concept of informa- 
tional privacy is defined by the confluence of ethics* 
social science*"" technology* and law*, representatives 
from those disciplines gathered for three days to 
explore the"^ concept and suggest ways ii; which it 
could be more clearly defined and in which the inter- 
ests of society and the individual could be better pro- 
tected. 

Three background papers were presented: Profes- 
sor George B. Trubow delivered a paper on the legal 
aspects of informational privacy in the United Statesr 
Dr. Fred W. Weingarten considered current and 
future communications and computer technology; 
and Professor Alfre^jd R. Louch discussed moral ahd 
etjiical concepts relevant to the notion of inforpa- 
tional privacy. The complete papers are not reprinted 
here; since. this report focuses on the symposium 
discussions. The background papers were published 
separately by the ABA s Section of Individual Rights 
and Responsibfflrfes and are available in "Invited 
Papers oa Privacy. Law* Etliics, and Technology.** To 
give a flavor of their content* however, brief synopses 
of the papers are presented in Appendix B of this 
report. 

Following the initial background session, wherein 
the foregoing papers were discussed, the participants 
were divided into three discussion groups, each of 
which included representation from (Sfie disciplines 
present at the symposium. After a day of group 
discussions* the participants met ajgain in plenary ses- 
sion to compare notes, report on progress, and re- 
evaluate symposium objectives.* At that time. Dr.* 
Willis H. Ware^ a scientist with The Rand Corpora- 
tion, and previously vice<:hairman of the Privacy Pro- 
tection Study Conunission, presented a paper Which 
suggested how law. technology, and ethics might be 
harmonized in a framework for infom^ational privacy. 
Dr. Ware's remarks were intended to provide added 



stinSulus to the continuing symposium dijalogue. A 
condensation of his paper also appears in Appendix B. 

Subsequent to* discussion of the Ware construct, 
there was a second day of small group discussions. 
The participants met in a final plenary session to hear 
from each of the groups and to consider findings and 
recommendations. The discussion w^s organized to 
focus on the meaning and significance of informa- 
' tional privacy* the current practices regarding the 
control and dissemination of information, and con- 
siderations for future^ action with respect to the 
develcpment and protection of informational privacy. 

This report is' based upon the transcript of the final 
session of the symposium. 

Befa^ moving to. the body of the report* it will be 
useful to clarify some terms as used in this document. 
The phrase "personal information" means any infor- 
mation that can be referenced to an identifiable indi- 
vidual by use of name* number or other characteristic. 
That which makes information personal is not its con- 
tent* but whether it refers to^a specific identifiable 
person The word "privacy" relates to people and con- 
siders what and how personal information is gathered 
and how it is used. One's privacy may be violated if* 
for example* improper or inaccurate information is 
collected. The word "confidentiality'* refers to the 
sensitivity status of information and' the circum- 
stances wherein one other than the d£lta subject or 
record holder inspects or uses personal information. 
The word "security** is often linked with privacy and 
relates, to the protection qf information in a record 
keeping system. Security^ prevents unauthorized dis- 
closure, alteration or loss of data and* thus, security 
attenpts to assure confidentiality and integrity of 
data. 

When one can inspect or use information* one has 
"access" to it. Information is "disctos^'* by a record 
holder to one who seeks access to it Dissemination 
. and disclosure are similar but the former implies a 
wider distribution of information, at times on the 
initiative of the record holder. 

This report often refers' to the Privacy Act of 1974 f 
V and to the Freedom of Information Act. The former 
covers personal information in certain record systems 
maintained by or for the federal government The pur- 
pos e of that Act ia.to assure that principles of privacy, 
confidentiality, imd security, to be discussed below* 
are observed by federal agencies in connection with 
the cdlection, storage, use, and disclosure of personal 
information. In brief, the Act allows a data subject to 
have access to f^es about himself, requires a pro- 
cedure whereby incorrect or obsolet6 data can be 
amended or discarded* and' restricts the use and 
dissemination of personal information maintained by 
federal agencies. 

. The Freedom of Information Act (FOIA), first , 
enacted in 1966* is basically, a disclosure statute. It 
presumes that inforjnation held by a federal agency 
should be avaipbl^^^to the public, ^y^th specific excep- 
tions to disclosure for protection of interests silch as 
national security, trade secrets, and proprietary infor- 



mation, or personal privacy. In effect^ the FOl A says 
that the governme'nt's business is everyone's busi- 
ness.' The Privacy Act» on the other hand* prteumes 
that p>ersonal information is nobody else's business 
and should be disclosed only pursuant to the data sub- 



ject's consent or specific provisions of law. 

We now turn to the symposium itself. We begin the 
summary of discussions at Amelia Island with the 
opening remarks to the participants made by the con- 
fetfence chairman, Judge Charles W. Joiner, 



Opening Remarks 

Personal Privacy and Information Technology 



by Charles W. Joiner 

Initially » let me suggest what this conference is not. 
It is not a conference to deal with the horribles about 
privacy invasions by the press or computers. It is not 
a conference to explore ^ways and means that com- 
puters can be made betjter— either in the sense of 
holding more information or retrieving it more^ 
rapidly. • 

I think it is not a conference primarily to study the 
ways and means of record keepmg to make informa- 
tion storage and retrieval more safe» nor even to hear 
how computers can be made more secure, nor to plan 
to serve spciety better through the use of the com- 
puter. - J 

This is a conference about people, about individ- 
uals, about human beings, about men and women who 
have developed a gloss imprinted on their souls called 
culture and who live, together in a civilization, each of 
whom has in some manner achieved a bag of values 
they carry with them until some of them may be lost. 

We are here» I believe^ to^be talking about you and 
me and each of the rest of u^ as ii\dividuals, about our 
values and our culture and our civilization, and about 
how this new science of information technology is 
affecting us individually— how it's affecting the 
values that we hold, how this affects our culture and 
our civilization, and hiojw it can be used to the benefit 
of individuals rather than to destlroy their souls. ' 

1 feel ^quite out of place talking to you about these' 
matters. Each of you is here becausd of some special 
expertise^ some of you as "the authority'* in the field 
of privacy itself. At the risk of offending the rest of 
you, I humbly acknowledge that any contribution Iv 
can make pales before the contribution of my friends, 
Alan Westin'and David Linowes* So, I go forward as 
one voice carrying with it all the baggage of the values 
I have developed as a result of my experiences, leam- 
ingi and the culture to which I have been exposed. 

The dialogue we are to have is on personal privacy 
and information technology. We are here because the. 
-Section of Individual Rights and Responsibilities of 
the American Bar Association requested the National 
Sciend6 Foundation s Program in Ethics and Values 
in Science and Technology to finance this program. In 
requesting funds» we have made the following repre- 
sentations: 



ERIC 



1. There is a feeling that t^e basic social values are 
being threatened by data storage, retrieval, and 
communications technology. 

2. There is a worry that developments in data tech- 
nology threaten social values of privacy, auton- 
omy, and our conviction about the right to be 
lef,t alone. 

3. There is a fear that the rapid development of 
technology will outstrip our capacity to foresee 
and prevent unintended abuses, citing Linowes, 
Orwell, and public opinion poUs. * ' 

The application then proceeded to list a iiumber^of 
questions about efforts to deal with this problem. We 
asserted that there was a reason to question whether 
the legal profession (the legislators, the practitioners, 
and the courts), acting largely alone, can deal with the 
complexities and refinements of the problem^ 

We suggested that it was not clear that the laws 
and regulations and judicially-created remedies toi an 
effective, solution^ It may be desirable to foster the 
development of ethical co^es and precept^ for the 
various data handling professions which may in turn 
affect the efficiency qf the data stealage and retrieval 
system itself. 

We represented that there^ was reason to believe 
that there was insufficient discussion among persons 
in the fields of ethics, morals, philosophy, anthropol- 
ogy and the "doers" (those creating the hardware and 
software) and "controllers'* (the legislatures and the 
courts) to respond to the problems. 

We indicated that there is a feeling that efforts have 
, too often focus,ed oil the dilemma of society's need to 
know and society's need for privacy and not enough 
on the dilemma of the "individual human being's need 
to be private" as agaipst the individual's need that 
society should know. * 

We suggested that the Section of Individual Rights 
and Responsibilities would convene a group of per- 
sons to provide intellectual interaction and dialogue: 

to understand and define the basic issues at 
stake» and ^ 

2. to explore the relative merits of legal and non- 
legal approaches to these problems. « 



So are here U)dd> ^ith the additiunal help from 
tht' American FedtTatiun of Infurmatiun Proceysing 
SiKietieb tu fiKUs un that problem the individual b 
pn\ dc> needji and v alues on the one hahd» as against 
the mdividudl's n^ for societ> to have information 
to pruv ide fur other indiv idual nee4i' and v alues on the 
.other hand. The individual is on both ^ides of the 
dilemma' 

It be^rns to me that central to what we are talking^ 
about at^this meeting is the individual, not the cor 
poration or the government. The hardware and soft 
ware of the b>stem that stores, retrieves, and com- 
rnunicates information is not central. The beginning 
point, the central point, is the individ,ual: We are inter- 
ested in the autonum> of the indiv idual but not in the 
sense tharhis priv acy actions are impinged upon by 
legislative proscription against contraception infor- 
mation or abortion, yr against hib right to read, or 
tigainst his right to be free to" act by choice in his. 
home. We art» interested in the narrow but important 
problem of the effect on that individual of information 
technolog} and the effect that data storage and 
retrieval (the technology of communication) has on 
him or her ab an autonomous person, and whether 
that effect is good or bad, and how w,e can best re- 
spond as a society this probTem. 

We are interested in this in two respects, one of 
which contains several parts: 

First, we are interested in understanding what have 
been and are the individual values rejatlng to privac^. 

Second, we are interested in determining how, if at 
all. current and projected use of data storage, 
retnev al. and communication s> sterns will affect that 
individual and his or her values. 

^ I. We want to know if that person has changed, or 
will change as a person as a result of data stor- 
age and retrieval ability of the computer and the 
new communication -systems and, if so, how. 
and^if we can determiiie— is this change good 
or bad. 

• ' 2. We want to know if and how that person*s ex- 
pectations of society are enhanced or depressed • 
by the data and communiqation systems and 
whal expectations for the future we might have 
^ from such change. 

3. We are interested in the conflict, if any, between 
these two and how that'<:onflict can be ordered 
and controlled. 

But above all, I think we are here always to keep in 
the forefront the indiv idual, the person, that person as 
a pnv ate indiv idual, but also that person as a gregari- 
ous individual who forms tribes, groups, and govern- 
ments, develops cultures and civiD^ations, and seems 
to have a need to relate closely with others,»to give 
others information so that others can make safe and 
enrich the life of the individual. 

When I was younger and had more energy, my wife 
and I would on pccasion devote some time to organ- 
ized study of selected topics. I remember a wonderful 
experience m the mid-1950*s in which we attempted to 
learn something about the humaneness of the human 



being. We became a part of a group isponsored b> the 
Fund, for Adult Education, reading selected materials 
and discussing the problem. We studied an excellent 
collection of essays, textbooks and research papers 
entitled "The Wa> of Mankind." The writers of these 
papers were all distinguished anthropologists, philos 
ophers^ or sociologists. It was exciting, but in 
attempting to help us understand the ways of man-* 
kind there was no mention of privacy, absolutely 
none, even in the chapters dealing with culture, 
technolog>, values, ethics, and society, there was 
nothing on privacy. This was true even though 
George Qrwell and Aldous HuxJey had raised the ugly 
head oJfsth^ subject for the public to see. In the 
midl9S0's learning about the ways of mankind, 
privacy was not worth talking about. ' 

Toda> all that has changed. Largely but not entire- 
ly because of the computer, we have been reassessing 
the place of privacy in our system of values and are 
redetermining when and how it fits into the ethical 
considerations of our society. . 

Each of us develops a value system from those who 
iire around us and from the events we observe, and we 
learn about that which seems relevant to us. Society 
takes the value systems of the group, excluding a few 
non-conformists, and .ethical considerations arise 
from which we ultimately adopt laws and regulations 
to govern our lives. It is clear to me that the value 
system as it relates to privacy has undergone remark 
able change in the last 20 years. 

I hope that we can focus on the changing of the indi 
V idual caused b> the information gathering, retrieval, 
and communication systems. I hope that we can look 
at the individual values, not only to be a private per- 
son but also to be a part of a social group— aside from 
the individual's needs to relate to others so as to pro- 
vide him food and .clothing, medical attention, and 
' other amenities of life. There is a deep felt need, I 
believe, for the individual to expose himself or herself 
to others and to be the recipient of confidences, A 
sense of caring and sharing is an important value. 

It seems to me that we are here to discuss a subtle 
but important problem. Does the pervasive gathering 
of personal information about a person or the wide 
dissemination olf that information adversely affect 
him or her as a person? Are we as individuals chang- 
ing? Axe we becoming more cynical, more open, more 
understanding, .more sympathetic, more callous, more 
rebellious, more subrfiissive? Is our ability to collect 
and process information and communicate it. more 
widely a factorin our becoming mofe litigious? Can it 
have ail affect on society's mores"tibout marriage and 
living arrangements, about the birth rate, and others? 
These questions are without end; but as to each ques- 
tion answered 'yes,'' another must be answered. Has 
the information gathering helped society to provide 
the things we want and need and treasure— for exam* 
pie, better health, less crime, more ease of travel? 
How should we balance the two answers and how can 
we control the balance? 

Let us think about an individual in society today,. 
At birth his name and date of birth^ names of hisl 
parents, their address, are recorded. This is ^ubUc. 
Every time he goes to the hospital or tg the doctor for 



treatment, a full record is made of everything done to ' 
him. Every tini© ho flies, the date and place 'are re- 
corded. When he attends school or cpllege/Uetailed 
information is acqtiired and retained about hiit^. If he 
ever has ai^ contact with law enforcement officials, 
another detailed set of 'information is kept^pn him. 
When he learns to drive, he obtains a license, he gives 
his name, his address, and his date of birth, and usu- 
ally a picture. This is kept yp to date. and is public. 
When he marries, his name, the spouse's name, their 
address, the fact of their passing a blood test^ are* all 
recorded cdong with the date. This, too, is public. 
When he first works, the government gets informa- 
tion that permits- him to establish his Social Security 
fila If he works for the government, he may have a job 
that requires an' FBI investigation and nSuch more 
information is kept in his file. The Internal -Revenue 
Service keeps all of his financial information. Every 
time he obtains a credit card or a bank loan br applies 
for insurance, detailed credit and personal informa- 
tion about him is gathered. 

Th^re are many more places where information is 
gathered and kept, but this recitation will be suffi- 
cient. AH during his life, *pi(itures and stoi?es of 
^anything he could do might be sent nightly into every 
'living room in the coimtry. 

My question to you then is this: Has this person 
changed as a result of any or all of these advances in 
the technolog;^ x>f data processing- and communica- 
tion? Is he different than* he would have been if this 
information had not been gathered? \yould he be dif- 
ferent if the information was all cross-interrelated and 
made wpre accessible? Is he different as an individual 
or in his ability to relate to others? Are his Values 
changed? Are his expectations altered? And what 
about the future? Wjll he change as the predicted 
advances and uses of two-way computer controlled 
television commmiications become a reality? Has he 
benefited as a.:fdsult of the advances in information 
retri^al an4 conMnunications? How does it balance? 
How can it'be controUed? Laws? Ethical standards? 
Proscription? Better hardware? Software? Regtda- 
tions? Religious revival? 

You havethree fine advance papers. We wiU talk for 
three days. I hope we can contribute to the solution of 
the problem. 
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Discussion 



Informational Privacy: Concepts, Values, and Technology 



Pnvacy is a word of many meanings; |)eople speak 
of physical pnvacy, emotional^'privacy, psychological 
privacy, and other types of privacy. In this report, the 
focus is on privacy dimensions whose existence arises 
from the collection, dissemination, and use of infor- 
mation—in particular, information about people. 

Even if restricted to this information contex^t, 
privacy is not a single concept or value. Privacy inter- 
ests range on a cpntinuiim from the effect on one indi- 
vidual resulting from a decision about him based on 
personal information, to the general vulnerability of 
society resulting from the rapid development oWnfor- 
mation technology unconstrained by privacy con- 
Mderations. Personal mformation kept in individually 
referenced fileh for the purpo^ of making decisions 
epout the data subject obt'iously has a direct impact 
m the mdividual. For example, information in an 
employee's personnel file can be used to determine 
whether that person shoulcf be hired or fired, pro- 
moted, or retired. At the other end of »the continCium, 
society may be vulnerable to the vast quantities of 
mformation made aviailable by modem technology. 
The collection and use of marketing information may 
dictate the kmds of goods and services made available 
to or withdrawn from various segments of the popula- 
Uon, the behavior or welfare of society can be affected 
by the use of information concerning buying habits or 
voting patterns. 

Somewhere along this continuum, individuals may 
feel vulnerable to the collection of iilformation not 
used immediately for any specific decision making 
process, but which might be used at some time in the 
future for a decision affecting such an individual. A 
participant expressed it this way: ^ 

This Glfttegory of concerns springs from' the pro- 
liferation of computer and communication technol- 
ogic that handle information about people and 
which can, through their very existence, subtly 
modify the way people behave. Some of us talked in 
terms of a chilling effect; I may be less outspoken 
OD more circumspect in my public, utterance and , 
behavior if I believe that a large friiction of things 
that r do and say is being squirreled away in a 
variety of information systems. The value issues 
addressed here involve not so much direct threats 
to specific civil liberties But a subtle erosion of our 
• ability to 'fully enjoy the fuU range of those 
liberties, v 

Retroactive guilt by association is one example of 
this category. The fact that A associates with B,^ 
recorded today in a file, may be of little concern. But 
perhaps a decade later, when B is then considered a 
social or political outcast, recall of the past associa- 
tion may then cause harm to A. The mere fact thai 
personal information is stored in files involves ,the 
possibihty that the information can be marshalled 
into a profile describing an individual.* Who knows to 



what uses, by government or by the private sector, 
this profile might be put? During the symposium it 
was expressed this way: 

The mere existence of an automated data base con- 
taining personal information is in itself a privacy 
problem. An analogy can be made to nuclear 
material, which is a potentially hazardous material. 
By analogy, a threat exists with regard to the mere 
computerization of personal information because it 
stays there. What happens to it, the individual 
data subject doesn't know. 

.Although the differences between immediate im- 
pact on the individual, future \iilnerability of the iildi- 
vidual and the potential vuhierabiUty of society at 
large can be'appreciated, it is not always possible to 
separate various kinds of personal information intp 
one or another of these categories. This adds to the 
p6mplexity of understanding the problem and shap- , 
ong a policy for informational privacy. 

It was also observed that privacy values vary with 
time, place, and culture. Just as language changes 
over time and words lyi'acceptable for public utter- 
ance a generation ago may be permissible today, so do'^ 
the passage of time and the changing values of a peo-'^ 
pie also c^iange the expectations of privacyand the 
effects of data collection. One participant obserjced: 

The concept of privacy changes over time, and 
because of other factors. Privacy concepts are dif 
ferent geographically. The concept of personal 
privacy in one part of this country may be different 
than in another. It changes demographi'cally. For' 
example, people in a village or small town could 
h^ve a very different concept^than a person in a 
large city where one has more anonymity than in'^a 
Smalltown. , \ . ' . 

Accordingly, informational poBcy must aclmit of 
sufficient flexibility to reflect the changing expecta- 
tions and cultural Values of people. Indeed^^our insti- 
tutipns have disagreed about perceptions ofprivacy. 
One example involves the 'confidentiality of bahk 
records: when the Suprem^Court of the United States 
consider^ the issue, it held that a customer does not 
have a reasonable expectation that his, bank *recoM 
will be treated as private.or c;pnfidential because* it is 
but an aggregate of separate "public" transactioijs 
whereby the customer sendg^personal checks intp the 
stream of commerce. On the other hand, on ;^virtiially 
the sahie question, the California Supreme Court held 
that a bank customer does expect confidentiality with 
respect to guch records. The Congress of the United 
States agreed with the California Court, and .in 1-978 
passed the Financial Privacy Act which in effect over- 
tums the U.S.. Supreme Court decision Wd giv^s a 
bank customer the expectation of confidentiality wth 
respect to his bank records, though only in connection 



with inquiries by federal authorities. 



Further, ts discussed in the legal summary paper 
found in Apptrndix H» even though fair information 
practices have been articulated^ they w^e developed 
to apply tO'govemment agencies and certain regu- 
lated businesses and not td the conduct of individuals 
in their private capacity. Now that the **personal com- 
puter" ;s growing in popularity toda^, and as more 
and more people purchase them for private use» a con- 
frontation develops between two differing privacy 

, interests^ The person who operates a computer in his 
living room perceives* that it is nobody's business 
what ii>formation he has and what he does with it! On 

^ the other hand, anyone about whom personal infortna- 
tiqp is stored in a microprocessor in a neighbor's hom^. 
may indeed have great concern about the potential for 
personal privacy violation. 

If society becomes more '*open/* informational pri- 
vacy may be ot less concern. Onejdiscu^sion group 
said: ^ ^ , > 

Our group suggested that there is an evolution tak- 
ing place^in the social context which defines what 
privacy is» artd that evolution is probably moving 
'towards a niore open society. While we disagreed 
about the extent to whicK a more open society 
would reduce the protJlems of privacy, we did agree 



that ^volution alone is at least in the short run 
probably not sufficient to solve •the problem . . . 
there probably will remain areas or pockets of 
privacy sensitivity for quite some time in the 
future. ^ ^ 

American society today, however,^ is uhprepared^to 
declare itself *'open'* and considers that significant 
amouhts of personal informatipn are "nobody else's 
business/* And even when information is "public** in 
the sense that anyone may observe it, ah individual 
becomes concerned when this "public** information is 
aggregated ahd stored in a dossier. Who would be 
happy to learn that a complete list is being kept of the 
' realty one owns, the clubs to which one belongs, the 
restaurants where one has eaten or the people with 
whom one has been seen, even though each of these 
separate items may be observed by the "public.** 
Much depends upon who is keeping the records, why, 
and how they 'are being used. 
Accordingly, the conferees agree that: 

INDIVIDUALS HAVE VARYING EXPE'CTA- 
TIONS OF INFORMATIONAL PRIVACY: 
SOCIETY LACKS' A CLEAR AND SETTLElT 
USE OF THE CONCEPT. 



Current Practices for Information 
Dissemination and Control 



i 



Given the uncertainty anci ambivaftice in defining 
privacy as. a specific value, it is not surprising that 
information practices with respect to the confidential- 
ity of personal information vary and are often con-^ 
flicting. ' ' . 

■ For instance, each individuisJ wants to make the 
determination as to whether personal information is 
relevant to a particular decision and should be sup- 
plied. That perception varies depending upojjyrliether 
one asks or answers a question. When a prospective 
employer, for instance, asks questions of'an applicant 
for' a job, he expects full and complete answers to all 
questions. ^On the 'other hand, the prospective 
employee filling out a job application may desire to 
provide as little personal infomiation as possible and 
to answer only those questions which^ he believes 
reflect favorably upon his chances for employment. 
The self interests of individuals may entail differing 
answers regarding what is or ought to "be confidential. 
' As a result, one would expect to find a wide variety ^of 
informatipn practices. 

The general public, as well as governmental 
authorities, appear to be hungry for information^ ^d . 
want to collect great quantities of it without a full 
awareness as to what may be the results of such prac- 
tices. Infomatiori in federal data banks often has 
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been collected as the result of some general authorisa- 
tion by Congress in connection with a program of 
government regulation or service. In, ihe private sec- 
tor, prior to the Fair Cre^t Reporting Act (FCRA), 
many abuses arose frpm the conduct of certain* crpdit 
reporting agendes^jhat gathered tod sto|TBd haphaz- 
anily and unreliabJR^ personal information which all , 
^too often surfacec^^fin harmful and degrading ways. 
Although the FCRs^ prevents many abuses, most per- 
sonal information J^aintained in the private sector is 
.not subject to any'regujation. The confidentiality of 
most banking information has limited protection only 
against federal inquines. Ther^ are no federal regula- 
tions oi health, -emplbynlent, insurance, or general 
business records, an^^ there js little state legislation 
providing practical pfot^tion in those areas. 

Although the Carter administration proposed a 
series of bills de'signeH to protect individual privacy in 
the public sector, none were enacted because grounds 
for consensus coi|[d n9t be found, ^or a decade Con- 
gress consideted legi^ation to regulate the confiden- 
tiality of criminal jifs'tice information, but again no 
agreement could be reached for a balance between 
access and privacy. Regardless of the kind of personal 
information involved, there is someone .who wants 
acces^' U> it and soH^eone else who wants to sjiield^t; 




the conditions and exceptions regardirig the supplj*' 
and demand of information are subject to vagaries 
that complicate systematic regulation. 

There are amazing incongruities in tiie ap|)lication 
of principles of fair information practices. The 
Privacy Act of 1974 undertakes to implement the 
principles but applies them only to executive agencies 
and does not bind fedetal courts or the Congress. The 
same pattern of exempting th^ judiciary -and the 
legislature from privacy legislation is typically found 
in those few states that have some sort of informa- 
tional privacy laws. For instance, suppose an individ- 
ual petitions a state court to have certain information* 
expunged or purged frojn a state agency record* When \ 
the right 4S established,*, the court enters an order . ^ 
requiring the ageAcy to expunge or purge so that the 
information is no longer available to the public. The 
order of the court, however, which specifically iden- 
tifies the purged information, may be considered by 
the courts to be a public record and, as such, may be 
stSbject to publi6* access. Although an individual's 
privacy right may have been recognized concerning 
information held by a state executive agency, that 
very same interest may be violated by the judiciary 
itselif. , " . 

Likewise, although the political files that a con- 
gressperson or'state legislator keeps probably contain 
a great deal vf sensitive information about consti- 
tuents, they are not subject to the constraints placed 
, upon executisie agency files. The pursuit of self inter- 
^ est (political, commercial and social) tenths to make 
fair information practices imeven. 

Conflicts ixi practice also result from the counter- 
vailing thrusts of privacy legislation and of freedom 
of information acts, ^whether at the federal or state 
level. Information in a government record may be 
presumed to be public, but personal information in 
the government record is likely to be considered con- 
fidential. Those differing presumptions may be justi- 
, fiable, but th^y also are difficult to implement when 
an agency Qjnployee tries to decide whether a citizen's 
**right to know'' supercedes another citizen s *'nght 
to priVEicy." One participeuit observed: 

One of the things that all of us have to .realize in 
terms of practice i$ that privacy often depenjis 
upqn the clerk in the records office, whether it s 
ffederal, state or local/ In your register of deeds 
office or in some other office which holds records, 
that clerk operates under the law, state or federal, < 
as he or she understands it. What goes on in the 
mind of that individual as to whether you get the 
record or not, or under what cinnunstances? 

As previously noted, fair information practices 
have been agreed upon only to the extent to which 
they apply to government or certain regulated busi- 
nesses. Accordingly, tohe individual who has a micro- 
computer at home does not consider himself subject 
tOftthe sdme constraints as applied to government or . 
business. The privacy ri^ht of the individual who 
stores in his personal computer information about 
* others is in conflict with the privacy of those about 



whorii he has'tKe infofmation. The conflict has yet to 
be balanced and resolved. 

Evf n when an individual can rely on informational 
privacy rights as against organizations, his path is 
not easy. As one discussion group reported: 

A person today is at a disadvantage in an adver- 
sary relationship to organizations with great 
amounts of respurces. It's 9ften difficult for a per- 
son to show what his injuries really are if he is deal- 
ing with intangible privacy injjaries; they don't 
leaye bruises that can be visibly seen. And the 
process for challenging a wrong is lengthy and 
^ costly and the individual's position is further 
eroded. , 

While this uncertainty in policy and practice per- 
sists, information technology develops in awesome 
diniensions without practical constraints on behalf of 
informational privacy. Tiny microprocessors and inte- 
grated circuits residing in an apparatus smaller than a 
breadbox currently have more power and can out- 
perform computers which a decade ago might «have 
filled an entire floor in a large' office building. 
Miniaturization and new techniques in electronic 
information storage devices permit vastjquantities of 
information to b^ stored and processed at^a speed so 
mind-boggling as to defy description. Satellites per- 
mit information generated in New York to'be instant- 
ly available in California so that, in differing time 
zones, an event can be recorded **before" it happens. 
Although technology did not create privacy prob- 
lems, it surely has escalated them dramatically, and 
that technology is being developed and used without 
adequate dedication to the control of privacy threats. 
Listen to this discussion among i)articipants: 

PARTICIPANT NO. 1: Computer technology has 
brought a problem that we've always had into high 
visibility because of the cost effectiveness with 
which it can collect and process personal informa- 
tion and the cost effectiveness with which it can 
deal with information in very large amounts. 

PARTICIPANT NO. 2: The technology potential 
is ther^ to control access and to control pnvacy. 
The computers provide that potential. But man- 
agers, holders of information, and controllers of 
information systems haye to make decisions to 
allocate resources, to spend the time and money to 
^ implement those technical safeguards. When I look 
at cuuent practice, the kinds of technical safe- 
guards that are instituted in data processing 
systems, I find them to be quite inadequate, a long 
way from what might be possible. Certainly there 
are exceptions in some organizations . . . but I see 
many cases where they're not building safeguards. 

' PARTICIPANT NO. 3: It seems to me that one of . 
the most important problems with current prac- 
tices has been iUustrated by this discussion. As 
was pointed out, we're developing major informa- 
tion commimi^ation systems and writing policy for 
those sysj^ms, and privacy is not being considered. 
If people think that we can come along in 1990 and 
impose on top of those structures once they're go- 
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ing some omnibus privacy act to iRx everything we 
discovered was wrong, they*re naive. We need to be 
putting privacy considerations into all these deci- 
sions that we're making now about -^the nature pf, 
the infottnation society we're bidding. 

PARTICIPANT NO, 4: 'If I heard him correctly, 
he*s saying that in the consideration of technologi- 
cal development, consider«ttion should be given to 
privacy aspects a.t the time*! the system is 
developed. 

PARTICIPANT NO. 5: P think it's got to' be said . 
much stronger** than that. It^s got to be said that ^ 
privacy confcems must be an explicit design goal in 
all new information systems. \ 

PARTICIPANT NO 6: [Participant No. 3's] com- 
ments really copcern me because what he describes 
is actually happening today. Congress is consider- 
ing a communications act which will affect how 
commilnications are established in the next him- 
dred years ... Is what we're doing here going to be - 
translated into something that has some impact? 
Is there time? I don't know. . » , 

PARTICIPANT NO 4: I don't knoW either. 



. PARTICIPANT NO 5: Decisiohs are being made 
- right now. 

PARTICIPANT NO 4: We can't all get on an air^ 
plane and go to Washington today. * 

PARTICIPANT NO 7r We need to step back and 
' make sure that we (Jbn't go too far. The point is. 
regarding t^rneto solve it, that as we sit hei-e, infor* 
mation systems are being d.e signed that will have 
an impact on privacy. These systems have to be 
^ under continual examination and there has to be a 
mechanism for making privacy protection explicit. 

* Further, there appear to be few limits on the future 
capacity or speed with which information technology 
develops. The conferees were, as a result, uncertain as 
to whether privacy had already been sacrificed for 
scientific achieverhent; they wondered whether the 
integQty of the individual had been exchanged for the 

advancement of society.'* Although the conferees 
were not willing to concede tljat all was lost, neverthe- 
less they did agree thatt^^ ^ 

THE INDIVIDUAL'S INFORMATIONAL 
PRIVACY IS RELATIVELY UNPROTECTED 
AND WILL REMAIN SO UNL^JSS AN EFFEC- 
TIVE CONSTITUENCY IS DEVELOPED.'* 



Considerations for Future Action 



Throughout th.e discussions .that took place during 
the symposium, the conferees repeaj^y encountered 
clashes of interest that require fair balancing, prob- 
lems that need further study aiyd dialggue, and ideas 
in wai\t of more examination and development. 'Con- 
sider the following excerpts: 

PARTICIPANT NO. 1: 1 think there's a difference 
between there being an identifiable and active con- 
stituency and there being an enormous amount of 
public concern about people's lives being affected. 
.One of the difficulties in mobilizing political action 
on the privacyissue is that constituencies are often 
people in groups that have a difficult time-acting in 
Xheir own behalf or even being able to put togefiier 
the pieces of the puzzle of what's happening in their 
lives. 

PARTICIPANT NO. 2: The public doesn't scream 
until it's hurt. Somebody had better ge£ worried 
about it; the framework of values needs to be de- 
fined in greater detail, and it cannot be done in a 
two- or three-day meeting. Whatever we do here is 
at best a preliminary attempt to serve as a catalyst 
or as a town crier with an alarm bell to lead to a 
specific mechanism or mechanisms which can 
develop something much more tangible and effec- * 
tive. 



PARTICIPANT NO 3: There needs to be a mech- 
anism through which there is public input or some 
kind of inputr into the development of systems 
which will contain personal information. 

, PARTICIPANT NO 4: 1 think it has been said by 
everyone so far that people become concerned when 
they suffer some real harm, but the^e is no general 
public awareness of the vulnerability that arises 
simply because of the existence of data banks and 
the material that's in them. The suggestion was 
made earlier that it may require a kind of Three 
Mile Island disaster to bring this to the public 
awareness. 

PARTICIPANT NO 2^ne-shot conferences have 
value. But they don't provide a continuum for new 
directions and actions. We need a practical mech- 
anism or mechanisms whereby we can attempt to 
get at privacy problems that are the result of the 
technological revdution and perhaps of other 
things. We have t6 bring together interested 
groups and the public so that they're made aware 
of the problems. ^ i 

PARTICIPANT NO 5: A* word that keeps^op- 
ping up throughout the discussion is the word 
**mechaiiism/'' a mechanism for a continuing 



analysis, a mechanism to balance the interests, ^ 
mechanism to do 'this or that. We seem to be 
searching for some sort of entity to assurethat all 
these privacy problems are going to be looked 
after. On the one hand, we certainly don't ^yant an 
mformation czar or a fedejal big brother. 5ut yet. 
there is repeateii; recogjiition that we need some- 
thing in terms of a formal institution. 

Two notable efforts in ^e past, the HEW advisory 
committee's report in 1973 and tKe Privapy Protec- 
tion Study Commission's report in 1977, were the 
results of sustained projects designed to examine 
informational^ privacy and to develop appropriate 
regulations, f^evertheless, those projects ended after 
several years, . aitd their recommejidalions for 
improvement have been filed on bookshelves. Lacking 
a coordinated and con^uing effort for implementa- 
tion» little positive actidn has pranspired during the 
last five years. The private sector has made some 
effcxl Juo improve its information practices, but never- 
theless the finding previously stated appears to stand > 
without sig^iificapt challeoge; the individual's infor- 
mational privacy is relatively un|)rotected. What 
emerges as a significanf .consensus is'this single but 
\irgent recommendation; , ' 

SOME Long-term mechanisms or in-. 

STITUTIONS, PUBLIC, PRIVATE, OR BOTH, 
MUST BE ESTAQLISHED TO EXAMINE AND 
DEVELOP INFORMATIONAL PRIVACY 
POLICY THAT BALANCES GOVERNMEN- 
TAL, SOCIETAL AND PRIVATE INTERESTS. 



Given the vague and general nature^^f privacy 
values and problems and the lin^ted tinie for discus- 
sion, the symposium participants were unable to 
develop specific suggestions for particular mech- 
anisms or institutions of continuity. The options for 
informational privacy protection include regulation 
by federal or state government, self regulation by the 
private sector, and self-help actions by individuals in 
pursuit of their own privacy interests. It is doubtful 
that an effective and balanced series of information 
cQntrols Will develop accidentally or as a result of 
pressures in the market place. A variety of informa- 
tdcxial privacy issues grow out of differing informa- 
ticxi usages and thi& seems to discourage the coales- 
cense q| an articvilate constituency clustered around 
any particular subject matter. Here are some con- 
sideraticxis that will affect the dynamics by which any 
institutions or mechanisms wiU be generated. 

Octrois ^ Gbver^ent? 

The conferees hesitant to suggest the estab- 
lishment of a feder^* agency whose responsibility 
wojold be to develop and monitor information policy. 
Congress has refused to establish any central agency 
with broad power to administer the Wvacy Act; most 
people seem to shrink from the notion of a'^^federal 



information czar.'* The question of **who watches the 
watchers*' is an important one. 

With respect to govemnlental interypntion, a 
threshhold question is whether federal or sjAte regula- 
tion is desirable? When information cresses state 
boundaries it could be an incredible burden on citizens 
and the business coiiimuni^iir 'Varying pjrotocols for 
the use of personal information had to be Observed in 
different jurisdictions. The National Conference of 
Commissioners on Uniform State Laws perceived a 
need for uniformity in infornjation regulation and 
recently proposed a unifoifc information practices 
code that undertakes to ni|ike consistent the notions 
of freedom of information* and informational privacy. 
The proposed uniform code has an optional provision 
for the establishment of a state information practices 
commission. The drafters of the proposal appear to 
recognize the utiUty of such an.agency^but made such 
a provision optional in recognition of the divided 
viewpoints regarding the wisdom of establishing such 
an agency. 

Self-Help? 

Apart from creating a federal agency to oversee 
informational privacy, Congress could simply extend 
the Privacy Act to the private sector, leaving it to 
individual citizens to protect their own privacy inter- 
ests by elective enforcement of the -law. As was 
pointed out earlier, the conferees recognized that 
private enforcement may place severe burdens on the 
individual however and may be a significant barrier to 
the protection of personal rights because of the time 
and complexity of litigation under the Privacy Act. 

On thq other hand, specific legislation might be 
enacted to deal with particular informational areas in 
the private sector such as health, insurance, employ- 
ment, or criminal justice. Legislation on those sub- 
jects is once again, pending in Congress, including a 
proposal to establish a federal agency to oversee the 
development and monitoring of information policy, 
but those proposals do not appear to have high prior- 
ity because the Reagan administration does not favor 
new government regulations. 

« 

Controls by the Private Sector? 

Although the Privacy Protection Study Commis- 
sion recommends some areas oi federal regulation, 
ihost of its proposals look to the private sector to 
develop and to enforce privacy constraints. There are 
some examples of industry leadership to develop 
information management principles, in conformity 
with fair information practices but, ag previously 
noted, the prbgress is slow. Informational privacy 
cannot be enhanced without changes in the way per^ 
^onal information is managed, arid those changes may 
entail additional business costs. Especially in times of 
economic stress, the private sector wiU be reluctant to 
undertake new costs in behalf of a murky concept of 
^^p^vacy,'' especially if there are no active pressures 
in the market place to do so. The conferees expressed 
doubt about the practicality of relying on the market 
place for privacy prot^tion. Consider these examples: 



PARTICIPANT NO. 1: The argument Uiat simple 
tra(Je association or other involvem^|^ will work 
may not be terribly persuasive. It's n^^ particular- 
ly in the interest of trade associations to^ake a big 
stink about privacy questions. 

PARTICIPANT NO. 2: Because of a lack of public . 
awareness, the people who are putting information 
systems into the market place don*t hear a public 
demand for privacy protectioa Even though there 
are some standards within the industry, the risk is 
that the industry itself would ignore the standards 
'and, simply because of cost, fire the computer guy 
who wanted to obey those standards. 

Bargaining in the market place might be a way to 
'determine privacy constraints, with customers 
negotiating and paying for informabonaJ privacy 'pr(> 
tection. For instance, a bank customer nught Sgree to 
pay an additional monthly service charge for the 
assurance thafcertain procedures to guarantee infor- 
mational privacy will be observed. But such an 
approach may be unfair if people with a valid interest/ 
in informational privacy are unable to afford' it On 
the other hand, perhaps those who have a high inter- 
est in protecting information «iay ,also have the abil- 
ity tft pay for it Business ^and finaiidal information 
may be an example of "ability to pay," but either sid^ 
of that argument is mere conjecture at present. 

□ □ □ 

Conclusion " ^ 

While the conferees brought the s3anposium to a' 
close with a feeling of accomph'shment^regarding 
improved understanding and insights, ifevertheles^ 
they were not convinced that informational privacy 
would be enhanced significantly in the 1980*s. From 



some perspective^ it seems as if George Orwell's 1984 
is already here, although it was also observed that the 
problem may not be massive ilivasiO;ns of privacy by 
"Big Brother s" giant computer, but the atrophy of 
privacy resulting . from **Little Brother**- tinkering 
with his personal computer n^t door. 

The network of those who press fgr the develop- 
ment of informational privacy may enlarge both in 
size and activity, and perhaps a privacy constituency 
will emerge. The challenge remains to develop a fair 
information policy that fespects individual integrity 
while accominodating the enrichmeilt of life through 
an advancing but humane technology. 

• □ □ □ ^ 

A Postcript: The Plan Fdr Action 

In light of the urgency expressed at the symposium 
for continuing efforts to epcplore and explain is^es of 
privacy in an environment of sophisticated informa- 
tion technology, we were not satisfied to leave the 
matfer of follow-up unresolved. The time constraints, 
of the symposium did not pennit further considi^ra- 
tion of an action program at the conclusion of the 
meeting. Accordingly, aYurther consideration of the . 
matter was imdertaken following the Amelia Island 
conclave. 

A planning committee met for two more days to 
consider what further action might be appropriate. 
Though it was considered linwise and premature to 
suggest a single ongoing mechanism to stirnulate 
development of an informational privacy construct, 
the planning group did agree on a format for an 
armual dialogue series as a focus for assessment of 
information privacy concerns. Plai\ning for and a 
search for funding of dialogues in 1983 and beyond is 
underway. 
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^ .The principal purpose of this paper is to ^scuss the ^ 
development and status of privacy mainly as it 
relates to the collection, use, or disclosure of personal 
information. Much of the recent concern about 
privacy has resulted from the phenomenal growth of 
mputer use, which has made it possible to collect, 
manipulate, and disseminate personal information in 
dimensions never before contemplated. Arthur MiUer 
warned of *'The Assault on I^rivacy" in 1964, and the 
public is increasingly aware of the vast quantities of 
personal information gathered and shared by federal, 
state and local government, as well as by the private 
sector. Personal information is defined as any infor- 
mation that can be referred to a specific individual by 
name, number, or other identifying ^characteristics. 
Consequently, it is not the content .of information 
which makes it personal but fether its reference. ^ 

Relevant Copunon L^w ^ 

A concept of privacy is not part of the English com- 
mon law and was not specifically recognized in earl^ 
American law. The idea of a legal 'bright to privacy" 
was presented in* 1890 in a law review article by 
Samuel D. Warren and Louis D. Brandeis: 

Instantaneous photographs and newspaper enter- 
prises have invaded the sacred precincts of private 
and dbtoestic life; and numerous mechanical 
' devices threaten to make good the prediction that 
'what is whispered in the closet shall be*pfOclaimed 
from the housetops.' 

The aqJJiors declared privacy to be . . a part of the 
more general right to the immunity of the person, the 
right to one's personality.'* They used the phrase, \^ 
''tha right to be let alone," to characterize the nature 
of privacy, which could be violated although the per- 
sonal information published was true. , , 
The common law of defamation is relevant to infor- 
mational privacy beeause defamation involves the 
publication of false information that injures reputa- 
tion. It was the falsity requirement that initially 
avoided conflict with the Constitution, because the ♦ / 
Supreme Court said that the First Amendment pro- 
tects tmth, but not falsehood. 

In 1964 the Supreme Court decided in New York 
Times v. Sullivan that there could be no liability for 
defamatory falsehoods about a public official unless 
^e defendant knew" that the publication was false or 
disjilayed reckless disregard as to whether the publi- » 
cation was false. In subsequent cases, the*Supreme 
Court extended the ''deliberate or reckless falsity" re- 
quirement to public figures as well as public officials. 
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The court made it clear in Sullivan ^hat the Constitu- 
tion sometimes protects falsehoodd^ to encourage free 
and oi>en debate.and comment. 

In 1§74 the Supreme Court decided Gertz v. Rob^ 
Welch, Inc, holding that because the plaintiff was 
neither a pjjblic figure nor a public official that he did 
not have w meet the "deliberate or reckless falsity*' 
test required in Sullivap, but did have to prove that 
the defendant was at least careless with regard to the 
falsity of the publication. Although the Supreme 
Court has said that some falsehbods^an be published 
without liability, it has not prescribed the limits on 
publishing truthful information, whether as to source, 
content, or utility. The survival of informational 
privacy depends upon the enforceable confidentiality 
of certain truthful information. 

Privacy and Fair InformatiqH.Practices 

A government report in 1 9lZ often has been cited as 
the first major contribution to the development of a 
'rational policy regarding personal information: 
"Records, Computers and theHi^hts of Citizens," by 
th6 Special Advisory Committee to the Secretary of 
Health, Education and Welfare. The report noted the 
significant growth of the use of computers to process 
information and proposed a set of "fair information 
practices" whose purpose was to enhance personal- 
' privacy by protecting,the-confidehtiality of personal 
information. These principles may be distilled as 
follows: 

1. Collect only that personal information neces- 
sary for a lawful ^Jiirpose. 

2. Use only ^iecision making (jlata that is relevant, 
accurate, timely, and complete. 

3. Give the data subject access to informatiori 
about himself and'a procedure by which to chal- 
lenge and correct the information. 

4. Use data dnly for the purpose for which it was. 
collected. 

5. Protect t^e data against unauthorized k)ss, 
alteration, or disclosure. , 

The Privacy Protection Study Commission, estab- 
lished by th e ■ Priv acy Act of 1974, conducted a 
thorough and comprSnensive study of public and 
private re^rd systems and issued some IGS^specific 
recommendations 'to enhance informational privacy. 
While acknowledging the 36undness« of the foregoing 
principles, the, Conmiission articulated three objec- 
tives of good information practice: (1) to m^^nize 
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intrusiveness to the personal affairs of citizens, (2) to 
moximize fairness to individuals in phe way personal 
information is managed, and (3) to legitiniize expecta- 
tions of the confidentiality of persorial information. 

Pedetal Laws 

The Privacy ^ct of 1974 deals with personal infor . 
mation stored by fedeVal agencies only and provides 
for ac(5ess by data subjects, procedures to correct and 
amend chaDenged information, and limitations on 
disclosures to third parties. The other significant 
federal laws protect information held,,b> some private 
sector entities. ^ • , 

The fair information practices and objectives seein 
reasonable on their face. It i^ in the application of 
these principles to differing informadion systems that 
difficulties arise. Record system managers disagree 
about how the principles of fair information practices 
should be interpreted. - . . 

The Fair Credit Reporting Act (FCRA) of 1970 re- 
quires the credit investigation and reporting organ- 
izations to make their records available to the data 
subject, to provide procedures for correcting informa- 
tion, and to permit disclosure qnly to authorized 
c^stomers. The Crime Control Act of 1973 requires 
that state criminal justice information s^^stems' 
developed with federal funds insure ihe **privacy and 
security" of information. Department of Justice 
regulations impose some restrictions on the dis- 
semination of criminal history record information. 
The Family Education Rights and Privacy Act of 
1974, poptdarly referred to as the Buddey Amend- 
ment, requires schools and colleges to grant gjudents 
^ (or their parents) access to student rec6rds, provide 
challenge and correction procedures, and sharply^ 
limit disclosure to third parties. The Right to Finan- 
cial Privacy Act of 1978 provides bank customers 
with some privacy .regarding records held by banks 
and related institiltions. The Act provides procedures 
by which federal agents may gain access, but the law 
does not cover statie or private sector third-party 
inquiries to banks. ' 

Although these regulations provide some protec- 
tion, there is no governmental regulation of employ-" 
ment and personnel, health and medical, or insurance 
information, and the record systems of private 
organizations generally are unregulated. 

The Freedom of Information Act of 1966 (FOIA) 
makes federal records available for public inspection 
. and copying, on the theory that the government's 
business is everyone's bjusihess. A specific exemption 
from the law s requirements -is ^or disclosures that 
would be a clearly imwarranted invasion of privacy. 
This exemption deals with cases in which a govern- 
ment record niay pertain to an individual other than 
the one, making the inquiry. Balancing the public's 
. **right to know'' against an individual's desire for 
priv^ is a tricky task, and there is no sure formula 
to give consistent results. 




State Laws , 

; State legislatures also have supplemented common 
law protection by providing some specific information 
confidentiality guarantees. Most states do have their 
own brand of FOIA, and the same conflicts with con- 
fidentiality statutes are encoimtered here as in the 
federal arena. ' 

Criminal justice and medical and ,tax records 
receive attention by many states. Conviction records 
are usually not restricted, and it is common for data 
subjects to have rights to inspect and challenge 
recorded criminal history information. A maj(Jrity of 
states provide confidentiality to medipal and tax 
records, respecting the doctor/patient relationship 
and the financial privacy of the taxpayer. 

Fewer than 20 states protect the confidentiality of 
bank Rcords in parallel to the federal law, and a . 
similar number have provisions to supplement FCRA 
protection. 

About 20 states have some sort of general privacy 
law, either in their constitution ofhy statute, but on 
the whole such measures are narrowband relatively 
insignificant. Informational privacy thus far has been 
a popular subj^t for state inquiry, although there is 
not much legislation to show for it. 

The National Conference of Commissioners of 
Uniform State Laws, in 1980, approved the draft of .a 
Uniform Fair Information Practices Code. That pro- 
posal includes both FOIA and privacy provisions, 
each modeled largely after the federal acts. The major 
benefits of the^draft are that it makes FOIA and 
privacy more compatible in implementation, it avoids 
some of the problems expieqenced a|r the federal level, 
and it provides a broad and comprehensive basis for 
managing information held by state and local govern- 
ipent. The UFIPC draft does not, however, seek to 
^ regulate information in the private sector. 

». 

Conclusion 

Whatever may be the bounds of privacy defined by 
various federal and state case precedents, statutes, or 

' . regulations, the notion does not have an intellectual 
foundation; what doctrine there is appears to be the 
result of emotion and value p>erception rather than 
that of any rational limits on^ disclosure of personal 
information based on reasonable and enforceable 
expectation. Even the generally accepted "principles" 
of fair information practice are subject to claims of^ 
exceptiqn and exclusion whenever applied to any par- 
ticular information system. "Tho^e rules are good for 

* others but not for m# . . ." is a frequent judgment 
rendered by an information system manager. Federal 
and state executives, legislatures, and courts pro- 
mulgate or declare more or less privacy, but they htive 
produced a patchwork quilt and not a fabric w'oven^* 
from the fiber of consistent tod uniform interests. 
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by Fred W. Weingarten 

This paper surveys the developments in informa- 
tion technology— products and servi^s—as they are 
likely ta evolve over the next decade and as they may 
possibly affect individual privacy. The predictions are 
surprise-free and are based on technology currehtly 
existing in the field or laboratory. They assume no 
3pecific legislative, regulatory, or market barriers to 
commercial develppment 

General Trends • ' . 

A number of ^general trends in information 
technology affect the nature of products and services 
that will be available over the next decade: 

1., Although small computers wiU become common 
in. the home and office, products that incor- 
porate microcomputer chips will be even mogfe 
nijjnerous. ^ * 

2. 'Computer-base^ products and services will be i 
mass .produced and will be widely available ay 
affordabife prices. / 

3. Information products and services .wiU be in- 
creasingly based on combinations of computer, 
commimication, and video technology. 

4. Electronic forms are growing increasingly cost- , 
competitive with paper for storing information. . 

5. An mfonn,ation market plate is growing, in 
which information is treated as a valuable com- 
mpdity— produced or -collected, packaged and 
sold for profit. 

6. The number of very large integrated data sys- 
' tens wili grow— ^stems that may be either 

highly centralized or composed of several small 
systems linked together by data conMnunica- 
tion lines. . 

. ** - . 
^ On the assumption thati the priyacy impacts of 
information technology will bfe felt prinfypally in 
terms Of the environment in which it is used» the 
following discussion has been oriented aroiuid these 
environments. 

Inf(Hination, Technology and the Person ^ 

Three important trends are changing^the potential 
of infprmation technology to collect infomlation 
directly from the individual: ' * ^ 

V 

1. Micro-miniaturization of electronics increases 
the. portability of iijjpnnation technology. 

2. Improvement ofisensoiy instruments allows for 
sophisticated, unobtmsive monitoring of bodily 
functions. 



3. New telecommunications technologiejs will facili- 
tate direct links with individuals, " ho matter 
where they are. , ' ■ ' , 

Products and services that could become available 
include pdrtable information tools such as the'hand- 
h^d computer or terminal and the "sipart'card"— a 
microprocessor on a credit or identification card. Also , 
likely are medical devices for passively measuring 
bodily functidns, transmitting* the infcHination, and 
even providing medic«^tion or electrical stimulus. 

Information Technology and the'Home 

Five major .trends ^characterize the use of informa- 
tion technology m^e home: , ^ / \ i**^* 

1. Many,^ perhaps most; common consumer -de- 
vices in the hbme will contain microprocessor^ 
chips. * . • 

2. '.Many homes will haVe desk-top computers. 

3. A variety tDfnew entertainment piedia and»pro- 
gramming will be available for purchase .or on a 
pay-for-service basis. 

4. Communication , lines into -and out of many 

^ homes, via broadce^st-and wire, wiU have much , 
mor^ information carrying capacity by the end 
of the decade.^ 

%. ^ ^ ^ 

^'5. Homes wiU be linked, to a variety ''of outside . 
information systems including eleckpnic 'mail, 
electronic banking, in-home shopping, teletext 
and videotext, and home security services. 

In sum, the home will expei;ience a rapid growth, 
both in computational and data storage^ capability 
and in the capacity of conmiimication links that' carry 
information in and out Appliances already are being * 
equipped with computer controls and memory capa- 
bility. Video cassettes and video 'disks offer new 
means for storage and playback of information. Two- 
way cable' systems, low-power "television, direct 
broadcasting satellite, cellular radio, and upgrades to 
.the local telephone loop wiBhsm provide tiata com- 
mimication facilities to the home that are vastly 
superior to Ihose ncrw^ available. 

Information- Technology at Work 

, Information technology will have a profound 
impact on work-^on the kinds of work we do and how 
we do it, where we work, the organizational structure 
of the. work place, and' the relationship between , 
employees and employers in orgafiizations. Specific 
trends are as follows: 
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1 . RoboUcs and other computer-based technology 
will transform the U.S. manufacturing in- 
dustry. ^ 4 

2. Word processing is only the leading edge of a 
, wholesale automation of white collar office work 

* that will take place during the next decade. 

3. The professions, such as medicine, engineering, 
and law, will becpme increasingly dependent 
on the use of automated'information serviced. , 

4. Employees whose jobs are principally handling 
information may be geographically dispersed 
through work at home, local office centers,^ or 

• other *paitem)s of distribution. 

A nuiiskber of privacy issues may be. raised by ^work 
place automation. For example, an autc«nate<i pia- 
chine used by an Employee may be continuQusly col- - 
lecting. performance data leading to increased 
employer surveillance of employees, fn addition, more 
employee data of all types will be Stored in electronic 
foniir making it ea^y to search, to transnut, and to 
match with other personal data files. ^ 

information Technology and, Society 

A number of broader societal products and services 
with, which a citizen interacts will also be changed by 
information technology. 

For example, banking will increasingly be done elec- , 
tronically, through such services as automated 



tellers, point-of-sale debits, and pay-by-phone arrange- 
ments. With 'Such systems, njore 4>ersonal informa- 
tion Will be collected and stored in computer-readable 
form. Financial data bases will be integrated as 
instructions offer a broader variety of financial serv* 
ices, and they will be linked into nationwide networks. 
Finally, payment alternatives used by individuals 
who wish to protect their privacy may ■ gradually 
disappear. 

The market place will place increasing emphasis on 
using computers and communication* technology to 
target sales efforts at narrowly defined consumer 
groups. This trend will place a premium on collecting 
and selliHgpersonal data for use in marketing applica- 
tions suc£m canpiling mailing lists for direct sales,^ 
testing and monitoring consumer behavior, measui^^ 
ing the effectiveness of advertising campaigns, and 
determining audience profiles. . 

Government and political use of information tech- 
nology will affect the individual as a citizjen. Govern- 
ment agencies operate large data systems containing 
personal information on millions of individuals. These 
systems will continue to grow, both in size and in the 
amounts of information held in each. In addition, 
pressures for efficiency will continue encouraging 
government to integrate the data bases of different 
agencies. The practice of matching (comparing; infor- 
mation, in one government data system with that in 
another) will also likely increase, for purposes such as/ 
determining possible criminal behavior or identifying^ 
questionable use of social benefit programs. 



Morality and Privacy 

.by Alfred R. Louch' 

We can take for granted that most of us want 
privacy andknow what it is when we find it But here 
unanimity ends. We feel the need f6r privacy in dif- 
ferent ways and to different degrees, depending on the 
varying circumstances of our lives. And we lack a con- 
sensus as to what kiiids and extent of privacy claims 
are justified, what sort of legitimate burdens an4 
restrictions these claims place on other individuals 
and institutions to respect them. So the question is 
not what privacy is, but whether and to what extent it 
is a right 

The theme of this conference relieves me of the 
obligation to sort out the variety of 'contexts in which 
privacy is claimed as a right. We ask here the more 
limited question: to what extent (and why) may the 
individual control the collection and dissemination of 
information about him? This is like the question: 
when is a person within his rights' in wanting to be 
observed? In that case, one might object to the inere 
fact of being observed, as much as to the potentially 
harmful consequences ^ of ^personal ^information ob- 
tained by another. This is why don't like spies, 
whether they are malicious^Or merely curious. Siniilar- 
ly, we may resent the stibrdge of information about us 



because we fear it may be used to affect us adversely; 
but vye may also object to its collection simply 
because it is an instance of spying, a more than casual 
scrutiny of what we are up to, even though what is^ 
Recorded is innocent and trivial. 

Our intuitions about spying may go some way. 
toward justifying and charting acceptable limits of 
information storage. Data banks, although possibly 
casual dollectors of information, are in effect over- 
diligent observers of individual behavior. Our objec- ' 
tion to storage of information thus has a source other 
than that derived from an adversarial conception of 
person/person and person/state relationships. That 
moder limits the vulnerability of individuals to one 
another and the state', thus guaranteeing some 
measure of-personal autonomy. Invasions of privacy 
will then be seen as threats to our favored political 
order and to our system of law. But the indiscriminate 
collection of personal data*£hreatens oiu* conception of 
ourselves as persons and as moral beings. 

I do not believe thai invasions of privacy be 
perceived as so fundamental if we suppose we confirm 
. ■ <our moral convictions through calculations of utility. 
For then privacy is merely one among many values. 



prized only to the degree to which one is more promis- 
ing That view makes respect for persons central and 
invulnerable to, calculations of policy. A community 
in which the individual is primary can be readily pic- 
tured by Seeing individuals as citadels protecting a 
rich interior life from public scrutiny or manipulation. 
If our minds become perfectly transparent to others, 
^we would cease to be that kind of being. 'Data coUec- 
'tion systems increase that transparency and so 
assauit our personal iniegrity, in a most profound 
way. The result is that our moral universe, our concep- 
tion of ourselves in relation to others, is radically 
transformed. 

1 conclude with two demurrers to this defense of 
informational privacy. First, our conception of 



private persons is nurtured within the segment of 
society most able to profit from the immunitiefe flow- 
ing from that conception, those who can afford space^ 
walls and other shields" from the curious and the 
malicious. So privacy may be protected only at the 
expense of equal treatment. * ^ 

Second, our highly individilalistitfconception of per^ 
sonal integrity is nurtured by-^ environment wmch 
communities have not always enjoyed and which our 
world community may be on the verge of losing. A 
future plagued by inadequate resources/ declining 
productivity, and growing population may soon b^ 
imable to afford the luxury of individualism and the 
sense of privacy that flows from it. * , 



A^Taxono^ny for Privacy 

by Willis H.Ware 



The invitation to present this paper suggested that 
it mi^ht seek to organize privacy concerns in some 
overall framework. The legal, jtidicial, and legislative 
communities -as influenced by moral and ethical 
views— are dealing with privacy issues one by one as 
they arise. There seems* to be no cohesion presently ' 
across the fabric of privacy. 

A suitable framework must accommodate tech- 
nology, such privacy law as has already been created, 
and the moral and ethical views of society. One 
approach is to imagine, the privacy consequences of 
' new technologies, butf it would all be. specxalation 
about things that are possible in principle bul might 
never h^pen. Instead, the discussion here attftmp^ a 
pragmatic look at the broad sweep of privacy and is 
oriented toward providing the legal and judicial com- 
munities a way of looking at privacy litigation and 
possibly also a way for. the legislative community to 
think about new law. 

Any discussion of technology will always point out 
its fapid progress and the profound effect it is likely to 
have on society, especially when the technology is 
related ip tsome way to information or data. Such , 
products as hand calculators, personal -computers, 
various cable services, wired cities, and on-line data 
bases can— in some scenarios— create privacy fconse* . 
quences in principle, but they do not automatically 
give rise to privacy difficulties in fkct and may never 
do so, depending on details of the utiUzatibn. Since the 
world has made an irrevocable commitment to com- 
puter technologjs, the days in which affairs could be 
conducted by paper and pencil under-green eyeshd&es 
ar^ forever gone.- Society must deal with the conse- 
quences, one Qf which is information. 
^Philosophically/ awkward moral and ethical issues 
arise when one seeks to define privacy, in fwrt because 
the very. word "piivacy*' connotes such diverse con-/ 
cepts to individuals. We do not really know what/ 
privacy is a comprehensive "way, but individuals 
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certainly believe they know it when they see it. What 
is needed is a framework for recognizing a privacy 
infraction and decictog what to do about it when it 
occurs. Rather than trying to define "privacy," define 
instead "invasion of privacy" and develop an overall 
construct from that point of view. 

Consider the notion of "space'* in the context of pjer- 
sonal surrounding. To iUustijate, visual space is what 
is accessible to eyes; aural space, what ears catch; 
physical spadg^is a cocoon of certain dimensions 
around a person. More abstract is the notion of info^ 
mational or record keeping space, but one's imagina- 
tion can see a volume that includes all the records that 
" concern one's 4ife. 

If we envision a *'space" as a physical volume, then 
we can also envision an intrusion or entry into such a . 
space. Negative or undesirable consequences of an 
intrusio;n can be catalogued and separated into annoy- 
ances: those thkt constitute harm and those that 
should be overlooked or ignored. The harmful ones 
will constitute the definition of what "injury" means 
for the space in question; we can then decide \yhat 
legislative actions or judicial insights are neededMx) 
-^deal with each space and its intrusions. 

Try spme examples. Visual space -is what thfe eyes 
see. Intrusions incljade flashing bright lights, the 
display of objectionable materials, or critical written 
attacks. Consequences of such intrusions include 
annoyance, anger, or damage to reputation. Some of 
these consequences might be legally actionable under 
existing law dealing with obscenity or defamation. 

Aural space is what is heard by the ears. TVpical in- 
trusions would include loud music, casual conversa- 
tion,^excessive noise^ shouted reriaarks or obscenities. 
The consequences of intrusion could include annoy- 
ance, physical damage"! pain, or anger. Some of them 
might be legally actionable; others wotdd not. 

Intrusions into one's physical space wotdd include 
standing^ close, sitting on the same bench, physical 
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pressure in a crowd, touching and fondling, or bodily 
confinement. The consequences could include annoy- 
ance, discomfort, psychological malice, sexual affront 
or bodily harm. Some of these might be actionable 
under- the laws of assault, battery, or false imprison- 
ment 

With respect to record keeping space, intrusions 
might include misuse of information, improper 
dissemination of infprmation, or collection of inappro- 
priate facts. Consequences could include embarrass- 
ment, denial of credit, or destruction of reputation. 
The privacy invasion of record keeping space is 
legally , action^le to ' some ext^t under vario^^s 
federal and state laws. 

In defining, invasion of privacy rather than privacy 
itself, the steps are these: identify a space of concern; 
identify possible intrusions; identify the conse- 
quences of each intrusion (here mord and ethical 
views of society are involved); determine what ''in- 
jury'* is for each intrusion (again, consider the moral 
and ethical views of sodetyK and, finally, address the 
question of legal actionability. Clearly the overall 
judicial process and legislative attention would be 
folded in. 

The ^validity of such a ''backend-to** procedure is 
encapsulated in the following series of points: 

• It concentrates on events and relates them to 
societal views, morals, and ethics as exemplified 
through tihe legislative and judicial processes'. 

• It tracks and reflects usage of technology 
rather 'than a' priori proscribing acceptable 
boundaries for it. ^ 

• It accepts any legal actions that are appropriate 
to the hurt, e.g., recover damages, penalize, or 
enjoin the perpetrator. 

•.It accommodates expressions of concern- by 
society in behalf of individuals, individuals in 
behalf of th^selves, or society in behalf of its 
institutions and organizations. 

:The proposed construct— or taxonomy for' privacy 
—might \>e used as an analytic framewwk for perceiv- 
ing the privacy consequences of some new use of tech- 
nology, or for identifying areas where legislative 
attention is needed. For this purpose, one would 
decide what space some new service might intrude, 
imagine the intrusions and consequent hurts,, and 
design saf^ards or laws to protect against them. 
Perhaps the notion of space— which is a concept bor^ 
rowed from the physical sciences— together withp an 
easily grasped idea of intrusions into a space, c%i 
usefully' add scope and fullness to an insightful idea 
expressed many decades ago. 



